SonarQube
Code-quality and security analysis across 40+ languages, now extended with AI features that check both human- and AI-written code: AI CodeFix suggests context-aware fixes, AI Code Assurance flags AI-generated code against quality gates, Sonar Vortex verifies code as an agent writes it, and the SonarQube Remediation and Hunter Agents clear backlog and hunt logic-based security flaws.
Find alternatives to SonarQube
"SonarQube Team Plan, free for your private projects up to 50k LOC. No card, no expiry." Public OSI-licensed repos get the same features as the paid Pro plan for free. Enterprise is custom-quoted (40+ languages, SSO/SCIM, portfolios, OWASP/MISRA reporting, zero data retention, BYOK).
What it does
- Code review
- Agentic coding
Sources
- Pricing
-
Free Team plan up to 50k LOC, free-forever OSS tier, custom Enterprise; read 2026-09-30.
- Description
-
Official documentation · 30 Sep 2026
"Get context-aware, AI-powered fixes for bugs and security issues" (AI CodeFix); "Automatically detect and flag code originating from generative AI tools" (AI Code Assurance). Vortex and the Remediation/Hunter Agents named on sonarsource.com/plans-and-pricing/ and sonarsource.com/solutions/ai/, read 2026-09-30.
- Sold within
-
Official documentation · 30 Sep 2026
Sold directly by Sonar; not packaged inside another vendor's product.
- Deployment
-
SonarQube Cloud (saas) and SonarQube Server, including self-managed/air-gapped per id715's Sonar Extends Agentic Code Governance... press release — both named on Sonar's own pricing and product pages.
- Interfaces
-
Official documentation · 30 Sep 2026
SonarQube for IDE (ide-extension), SonarQube Cloud/Server web dashboards (web), CLI scanners, and a documented API — named as separate products/interfaces in Sonar's own product nav.
Something wrong here? Send a correction — quote this product id: sonarqube.